Kai wrote:
> Message from syslogd@www at Mon Feb 11 13:06:23 2002 ...
> www procmail[17404]: Couldn't rename bogus
> "/home/sites/site44/../../spool/mail/rortap" into
> "/var/spool/mail/BOGUS.rortap.SmrB"
> 
> It seems like there is a mailing script on the server trying 
> to do some nasty business or somthing..

"man procmail" is your friend :)

       If  /var/spool/mail/$LOGNAME is a bogus mailbox (i.e. does
       not belong to the recipient, is unwritable, is a  symbolic
       link or is a hard link), procmail will upon startup try to
       rename it into a file starting with `BOGUS.$LOGNAME.'  and
       ending in an inode-sequence-code.  If this turns out to be
       impossible, ORGMAIL will have no initial value, and  hence
       will inhibit delivery without a proper rcfile.

HTH

Graeme
-- 
Graeme Fowler
System Administrator
Host Europe Group PLC
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security

Reply via email to